'06/17/2035 14:01 WMP ■» 17038729306 



NO. 174 D03 



AMENDMENTS TO THE SPECIFICATION 

Please amend the specification beginning at line 10 on page 15 of the Patent Application using 
the following replacement paragraph: 

The modem driver 240 and/or the authentication agent 90 may be stored in a secure 
location, such as the system BIOS 170, a secure memory device on the ACR card 215, a secure 
memory device in the computer 100, ere. An exemplary technique for storing a secure driver is 
described in U.S. Patent Application No. 09/901.176 XX/XXX.XXX, (Attorney Docket No. 
3000.053400/DIR, Client Dookot No, 111040), in the names of Terry L. Cole, David W. Smith, 
Rodney Schmidt, Geoffrey S. Strongin, Brian C. Barnes, and Michael Barclay, entitled, 
'PERIPHERAL DEVICE WITH SECURE DRIVER," and incorporated herein by reference in 
its entirety. 

Please amend the specification beginning at line 16 on page 16 of the Patent Application using 
the following replacement paragraph: 

Referring briefly to Figure 3, a simplified block diagram of the processor complex 1 10 of 
Figure 2 illustrating the execution of the authentication agent 90 using an SMM or secure 
architectural extension implementation is shown. In the embodiment of Figure 3, the processor 
complex 110 includes a microprocessor 300 that interfaces with a memory device 310. The 
microprocessor 300 executes the functions of the modem driver 240 in a standard mode of 
operation and the authentication agent 90 in a privileged mode of operation. For example, the 
authentication agent 90 may be invoked using a system management interrupt (SMI). The 
processor complex 1 10 transitions to privileged mode (i.e., SMM) in response to the SMI and 
executes the authentication agent 90. The authentication agent 90 authenticates the modem 
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driver 240 as described in greater detail below. A portion of the system memory 310 may be 
designated as a shared mailbox for privileged mode activities. Applications operating in the 
standard mode, such as the modem driver 240, may place data in a designated inbox of the 
shared memory space, and applications running in the privileged mode, such as the 
authentication agent 90, may place data in a designated outbox of the shared memory space. The 
outbox may be designated as read-only for standard mode applications. An exemplary computer 
system having a shared mailbox for passing data between standard mode and privileged mode 
applications is described in U.S. Patent Application Serial No. 09/853,447 XX/XXX,XjXX, 
(Attorney - Dookot No. 2000.03 8700/LIII > Cliont Dookot No, TT3760) ? in the names of Dale E. 
Gulick and Geoffrey Strongin, entitled "INTEGRATED CIRCUIT FOR SECURITY AND 
MANAGEABILITY " and incorporated herein by reference in its entirety. 

Please amend the specification beginning at line 13 on page 17 of the Patent Application using 
the following replacement paragraph: 

The particular technique for invoking the authentication agent 90 and the frequency at 
which it is invoked may vary. For example, the modem driver 240 may call the authentication 
agent 90 at a predetermined frequency (e.g., every N frames). In an alternative embodiment, the 
authentication agent 90 may be invoked periodically by another process independent of the 
modem driver 240. For example the operating system under which the computer 100 operates 
may include a timer that is used to periodically initiate an SMI to invoke the authentication agent 
90. In another embodiment, security hardware including a secure timer may be included in the 
computer 100 for periodically invoking the authentication agent 90. For example, a restart timer 
155 (see Figure 2), resident on the south bridge 150 may be used to periodically invoke the 
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authentication agent 90 after a predetermined amount of time has elapsed. The particular 
operation of the restart timer 155 is described in greater detail in U.S. Patent Application Serial 
No. 09/853.447., incorporated above. 
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